Not rated
CVE-2016-5431 The PHP JOSE Library by Gree Inc
Description
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jose-php | Versions not published |